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Financial Account Management 

This is a continuation-in-part of United States Patent Application 
Serial Number 09/502,147 entitled "On-line Personal Financial Account 
5 Management," filed on February 11, 2000, and incorporated by reference. 

This invention relates to on-line personal financial account 
management. 

10 Access to personal financial accounts, including credit card 

accounts, debit card accounts, checking accounts, savings accounts, and 
investment accounts, is often governed by an account number, sometimes 
in combination with a password or personal identification number (PIN). 
When the holder of the account wants to perform a transaction using one 

15 of the accounts, he typically must expose the account number and the 
password or PIN to third parties. A dishonest third party can use the 
account number to perform fraudulent or otherwise unauthorized 
transactions to the full extent of the account balance or limit. For this 
reason, consumers, for example, are wary of providing credit card account 

20 numbers through the Internet to on-line retailers to purchase products. 

Credit card fraud is widespread. For example, the Credit Card 
Management magazine has reported Master Card International's 
worldwide fraud losses at $462 million in 1996, $466 million in 1997, and 
25 $530 million in 1998. With the growing popularity of on-line shoppers 
using their credit and bank accounts over the Internet, the rate of credit 
crime is expected to increase significantly. The CRN Business Weekly 
has reported that e-retailers experience between 15% and 40% fraud rates. 

30 The invention reduces the risk of loss to a user of financial 

accounts. In general, in one aspect of the invention, a holder of a financial 
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account predefines a virtual account associated with the financial account. 
The virtual account has an associated limitation on a payment to be made 
from the financial account. In connection with a transaction, information 
about the virtual account is provided to a third party. A third party uses 
5 the virtual account information to make a request for a payment. Any 
payment from the financial account that is outside of the limitation 
associated with the virtual account is prevented. Because only the virtual 
account information is made available to the third party the risk to the 
account is limited based on choices made in advance by the user. 

10 

Some implementations of the invention are described in the 
following text. 

Figures 1 through 10 show aspects of implementations of the 
is invention that are explained in the text. 

As shown in figure 1, a user 10 can manage funds in financial 
accounts 12 (e.g., credit card accounts, debit card accounts, checking 
accounts, savings accounts, and investment accounts) that are held by the 

20 user in financial institutions 14. The user can manage the funds using so- 
called virtual accounts 16 that are part of a user file 1 8, which is 
maintained on the user's behalf by an intermediary 20. The user can use 
the virtual account to conduct transactions with third parties 21 that 
involve funds in the financial accounts. Conducting a transaction requires 

25 an active financial account 12 and an issued (validated) virtual account 16. 
The virtual accounts enable the user, among other things, to limit the risk 
of theft of funds from the financial accounts in pre-defined ways that 
depend on the context in which transactions are to occur. The 
intermediary provides similar services to a large number of users and with 

30 respect to a large number of financial accounts. 
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The following discussion focuses on the example of a consumer 
using a virtual account to make on-line purchases from an ecommerce 
retailer. Of course, this is only one example, and other types of parties 
could use virtual accounts to conduct transactions for other purposes. 

5 

To make use of virtual accounts, the consumer first registers with 
the intermediary either through the intermediary's website 23 or by 
telephone or mail. In any of the registration methods, the user provides 
information, described below, that will define the user's file 18 maintained 
io by the intermediary. 



As shown in figure 2, the user file 18 includes: 



• an eCard number 24 that is associated with the user for use in 
15 connection with transactions that are to be paid from funds in the 

accounts; the eCard number can be evidenced on a physical card 
given to the user for presentation to other parties to the 
transactions. 

20 • a name, address, and other identifying information 26 of the 

registered user. 



• a list of registered financial accounts 28 that the user designates to 
be part of the file; each financial account is identified by the 
25 account number, the financial institution, a shorthand name 

assigned by the user (e.g., "BankBoston Joint Checking Account"), 
an authorization telephone number for the financial institution. 



• a list of registered fimd receiving parties 30 that the user designates 
30 to be part of the file; each account is identified by a name and 

address. 
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• a file password 32 that enables a user to confirm his authorization 
to have access to the user file 18. 

• one or more virtual accounts 34. 

The information in the user file can be modified from time to time 
by the user through the intermediary's website or by telephone or mail. 
The file password is required as a condition to making a modification. 

Once the user is registered, he may manage (create, modify, and 
delete) one or more virtual accounts 34. The virtual accounts are managed 
through the intermediary's website or by telephone or mail. Access to 
create a virtual account requires use of the user's name and file password. 
Access to modify and delete a virtual account requires use of the virtual 
account password (mentioned below). 

As shown in figure 3, each of the virtual accounts 34 in the file 
includes 

• a virtual account name 36 (between one and sixteen numbers or 
letters). 

• an indication 38 of which registered financial accounts are 
available for use in the virtual account and a specific dollar limit 
that is to be available from each of the financial accounts. 

• an indication 40 of which registered fund receivers are authorized 
to receive funds in the virtual account and a specific dollar limit 
that may be paid to each of the receivers. 
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• an indication 42 of the number of occasions on which the virtual 
account may be used. 

• an indication 43 of an expiration date of the virtual account. 

5 

• a virtual account password 45 selected by the user. 

When the virtual account is being managed on-line, one 
mechanism for controlling the information in the account is a virtual 

io account submission form, for example, the form shown in figures 4 and 5. 
(Figure 4 is a blank form and figure 5 is an example of a completed form.) 
The form may be displayed to the user as a web page on the web site 
hosted by the intermediary. The initially displayed uncompleted form 
includes the existing eCard number 24 of the user, the customer's name 

1 5 and address 47, and a list of shorthand names of all registered financial 
accounts 46. Each financial account has a check box 48 and a box 50 to 
indicate an upper dollar limit on funds that may be drawn from the 
financial account in connection with the virtual account. 

20 The virtual account form also includes boxes identifying receivers 

of funds 52 in connection with the virtual account. The receivers may be 
chosen from among all of the registered receivers using a drop down list. 
A box 54 next to each receiver shows a maximum limit of dollars that can 
be paid to the receiver in connection with the virtual account. 

25 

Boxes 56, 58 are provided to indicate whether a single or multiple 
purchases are permitted for the virtual account. A box 59 shows the 
expiration date of the virtual account. 

30 The virtual account name can be selected by the account holder 

(user), in which case the virtual account is called a virtual-transaction- 



-5- 



Docket No.: 11602-002002 



order (VTO), or by the account issuer (intermediary) in which case the 
virtual account is called an express-transaction-order (ETO). A box 60 
contains the virtual account name (VTO) selected by the user. A check 
box 61 is provided to select an ETO in which case the user does not select 
the name. A box 62 provides a place to type the virtual account password. 
A submit button 64 enables a registered user to submit a new or modified 
form for processing to create a new or modified virtual account. After 
clicking the submit button 64, if the user selected an ETO by checking the 
box 61, the user is informed of the ETO (one to ten numbers or letters) on 
an ETO information screen (not shown) and told to record the ETO and 
keep it in a safe place. 

By clicking on the fill-in forms button 66 the user's name, address, 
e-card number and virtual card number are automatically transferred into 
the appropriate boxes in the shopping cart page of a merchant at which a 
purchase is being made. 

Links 70 enable the user to perform other functions including 
reading a message from the intermediary, reviewing the status of his file, 
viewing virtual accounts, viewing transactions performed using virtual 
accounts, sending a message to the intermediary, and canceling the . 
account submission. 

When the virtual account is being managed by telephone, one 
mechanism for controlling the information in the account is a telephone 
access system that uses, for example, a method 130 shown in figure 6. 
The method begins when a user calls 129 a phone number of an eCard. . 
system. The eCard system is an automated telephone system that uses . 
recorded voice prompts and touch tone (dual tone multi-frequency) 
responses, but alternatively the communication can be by live 
conversation between the user and a customer service representative. 
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Once the user has telephone access to the eCard system, in the case of 
automated response, the user chooses between standard procedures 1 3 1 
and speed procedures 133 by pressing one key for "standard" or another 
key for "speed," the keys being verbally identified to the user (132). In 
other examples, the user may not be offered a choice. 

In either the standard procedure or the speed procedure, the user 
may press a predefined one-key sequence or two-key sequence, identified 
when the user accesses the system, at any time during the call to have the 
option of canceling his previous entry and/or canceling the transaction. 

In the standard procedure, the user enters an eCard number (134) 
and a user file password (big key) (136) using his telephone keypad. Once 
the eCard number and the user file password are verified as.accurate, the 
user selects a financial account for which he wants to earmark funds for 
allocation to a virtual account (138). For purposes of selecting an account, 
the system gives the user with a number of account options, such as "enter 
one for Visa, enter two for MasterCard, three for Discover, or zero for 
another account." Pressing zero in this example could provide the user 
with another automated list of account choices and/or the user may be 
prompted to verbally identify the desired account after hearing a "beep.",. 
After selecting an account, the system 130 inquires if the user wants to . 
identify another account from which funds are to be allocated to .virtual 
accounts (140). If so, the user is directed back to item 138. If not, the 
system proceeds. For each selected financial account, the user enters the 
amount to allocate from that financial account (an upper dollar limit) (142) 
by, for example, pressing "2-0-0-0-0" for $200.00. 

The user may then be presented with account options, each, of . 
which the user can select by pressing an identified key. Each option can 
be selected any number of times, including multiple times. One option 
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includes hearing the total balance of available funds in the user's eCard 
account (144). Another option includes inputting the designated receiver 
of the selected eCard funds by clearly stating the name and/or phone 
number of the fund receiver after hearing a "beep" (146). Alternatively, 
5 the system could present the user with a number of fund receiver options 
and a key to press to verbally identify a fund receiver in a procedure 
similar to selecting an account. Another option includes entering the 
expiration date of the account (148) by, for example, pressing "0-3-2-0-2- 
0-0-0" for March 20, 2000. 

10 

Another option is issuing a virtual account (150). Issuing the 
virtual account finishes the transaction. The user chooses between 
entering a virtual account name (VTO) or being provided with one (ETO) 
(164). For a VTO, the user enters the virtual account name using the . 

15 telephone keypad or by verbally identifying the name after hearing a 

"beep" (166). For accuracy and added security, the user is prompted to 
reenter the virtual account name (168). The user is also prompted to enter 
his virtual account password (small key) (170). For an ETO, the use*.,,,-, 
verbally hears the virtual account name (172) and is told to record the 

20 ETO and keep the ETO in a safe place. The ETO may be repeated to 
ensure that the user accurately records it. The user also enters a virtual 
account password (1 70). Once the virtual account is created, the user may 
choose to create another virtual account (152). If so, the steps are the 
same ones shown beginning at item 136. If not, the system terminates the 

25 call, possibly first informing the user how to again access item 1 32 or 
other item in the system. 



If the user chooses the speed procedure, the user enters the ; last 
four digits of his eCard number (154) and the last four digits, ofhis social 
30 security number (156). Instead of entering part of a social security, , 

number, the system 130 could ask for another unique user identifier such 

/ 
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as the file password. The user then selects the amount of the funds he 
desires to allocate from a recorded list (158), such as "press one for 
$200.00, two for $500.00, and three for $1000.00." The user also enters 
the virtual account name (160) and the virtual account password (small 
key) (162). The speed procedure may instead offer the user a choice 
between a VTO or an ETO or automatically provide the user with an ETO. 
After the password is verified, the virtual account is created. Having 
issued the account, the system 130 terminates the call, possibly first 
informing the user how to again access item 132. 

Whenever a new or modified virtual account is created, the 
intermediary verifies with the financial institutions that maintain the 
accounts involved, that the amounts indicated for those financial accounts 
in the virtual account are available from the financial accounts. The 
intermediary also arranges for the financial institutions to reserve those 
amounts against the possible use in the virtual account. Once the amounts 
have been verified and reserved, the intermediary confirms the validity of 
the new or modified virtual account to the user. 

Before virtual accounts are set up and used, the intermediary pre- 
arranges with ecommerce vendors to accept the eCard number and virtual 
account numbers from users who are registered with the intermediary. 
The ecommerce vendors may include on their shopping cart or similar 
web pages the ability for the user to indicate that he is an eCardiholder. 
Space also may be provided for the user to enter the eCard and virtual 
account numbers. Alternatively, the ecommerce vendor may accept the 
eCard and virtual account information in a box provided for alternative 
payment arrangements other than commonly available credit cardsjsuch as 
Visa. 
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As seen in figure 7, for interacting with the intermediary on the 
World Wide Web, a registered user can install a linking icon 80 in a tool 
bar of his browser. The toolbar, and therefore the icon remains, active 
without regard to the web sites being visited in the main window 82 of the 
browser. If a user were visiting the amazon.com site, for example, and 
wished to manage a virtual account, say for the purpose of configuring it 
for making a purchase from amazon.com, he would click on the icon 80, 
which would open a window for a user to log onto the web site of the 
intermediary. 

The window 84, shown in figure 8, includes a box for a user name 
and a user password (which is the file password mentioned earlier). After 
typing his name and the password and clicking the submit button, the 
server of the intermediary's web site would verify the password 
information. Then the server would display the virtual account 
submission form 86 part of which is shown in figure 9. . 

Purchases can be made either electronically or in personat stores. 

As seen in figure 10, when the vendor is asked for credit card 
information, the user enters his eCard number and his virtual account 
identifier (100). Upon confirming the order, the web vendor's server 
automatically submits the eCard and virtual account information to the 
intermediary's server for payment (102). The intermediary's server lt . 
confirms that the eCard and virtual account are valid and that the vendor's 
identity and the payment amount are within the limits specified in the 
virtual account (104), including the limits with respect to amount, time, 
and number of transactions (otherwise, the transaction is refused.) If the 
limits have not been violated, then the intermediary confirms the 
transaction back to the vendor (106) and pays the amounts to the vendor. 
The intermediary server divides the charge amount among the, financial 
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accounts for that virtual account and issues payment requests to the 
financial institutions that maintain those accounts (108). The payments 
are made in the usual course (1 10) and the user is billed by the financial 
institution (112). If the intermediary has a pre- arrangement with the 
5 financial institution, the intermediary may be able to interact with the 
financial institution using the eCard number directly. Otherwise, the 
intermediary uses the account number (for example, the credit card 
number) established by the financial institution. 

10 In the case of a purchase in person at a store, the user presents the 

eCard to the merchant (120). The merchant swipes the card on a reader 
(122). A call is then automatically made to a phone number provided on 
the magnetic stripe of the eCard (126). The call is connected to the 
intermediary (128). The user enters the desired virtual account identifier 

15 on a keypad (124). From that point, the steps are the same as the ones 
shown beginning with item 1 04. . i • . ■ 

A user may distribute virtual accounts to trusted individuals in a 
manner that would control the amounts that the trusted individuals could 

20 spend from the financial accounts. For example, a parent could provide a 
virtual account to a child for use on at a college bookstore. In effect, the 
individual can create any number of specially defined virtual accounts 
using his financial accounts as the sources of funds, with strict limits on 
the payments that may be made from the financial accounts, and without 

25 concern that the full amounts or limits of the financial accounts .would be 
at risk of fraud. e 

The intermediary may also provide virtual deposit accounts, for 
users that could earn the same interest as bank accounts. The user, would 
30 deposit the money into a virtual deposit account and the intermediary 
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would in turn deposit the money into a financial account chosen by the 
user. 

Bill paying services can also be provided by the intermediary to 
enable the users to pay bills automatically and electronically from the 
financial accounts at times and in accordance with limitations defined by 
the user. 

Among the advantages of the invention are one or more of the 
following: 

A highly secure, flexible, and reliable system is provided to - 
manage various personal accounts on-line. Fraud is deterred and the 
credibility of payments is increased for retailer industries, especially e- 
retailers. Losses to creditors and individual cardholders are also reduced. 
The system can be used to generate to generate one-time- valid virtual 
accounts for on-line purchases without worrying about stolen account > . 
numbers, fraud, hidden costs, and wrongful charges. 

The risk of loss from the financial accounts is reduced to the 
amount of the transactions authorized by the virtual accounts and is 
distributed among the virtual accounts. Even if a virtual account number 
were stolen, the enforcement role played by the intermediary would assure 
that the loss would not exceed the amount authorized in the virtual 
account. The user would not need to use or release to vendors any of his 
financial account numbers. The user can consolidate transactions: for all of 
his financial accounts in one intermediary file and manage them all using 
virtual accounts. 

Other implementations are within the scope of the following,. , 
claims. For example, other kinds of limitations can be defined in the . 
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virtual accounts and enforced by the intermediary. 




- 13- 



